This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft File: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft (raw, json) Hash identifier: nRtTOIXF8NYtB7oLBRsa24LDG5q4EHvkEAAuHDKaHnQ= Subject key identifier: 7B:69:92:E7:D6:D7:C9:01:CF:58:E8:7F:68:C4:7A:5A:20:12:90:EC Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Certificate serial: 31B2BC5F001D1BD9AFEC7AC57B99FC05B5A506EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft Manifest number: 039F Signing time: Thu 04 Dec 2025 13:11:54 +0000 Manifest this update: Thu 04 Dec 2025 13:06:54 +0000 Manifest next update: Mon 08 Dec 2025 00:12:54 +0000 Files and hashes: 1: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl (hash: GVK5kWz1S7K2dvvlPP2f+lRv+C90Bo4MaLYmBbEEyaU=) 2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: /EB5uVPByNIi8kXY9MVULDEpqEYMsLoCXri+MR4evTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:bc:5f:00:1d:1b:d9:af:ec:7a:c5:7b:99:fc:05:b5:a5:06:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Validity Not Before: Dec 4 13:06:54 2025 GMT Not After : Dec 8 00:12:54 2025 GMT Subject: CN=7B6992E7D6D7C901CF58E87F68C47A5A201290EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:6b:7d:a4:8b:93:2c:72:8f:a1:cf:56:98: 59:9f:e6:64:c3:31:c4:63:20:ae:f5:ec:85:de:c7: 73:08:86:58:6e:f4:bd:b3:37:85:a3:a2:79:e8:55: 9f:52:7e:2c:d5:19:9f:24:8c:e8:2b:7e:cd:f3:e3: bf:54:96:48:bb:1e:ff:14:f3:92:c7:e0:96:91:63: 71:24:16:1f:88:04:61:ba:5e:cc:44:8e:78:a4:ce: bf:0e:a0:31:fe:b4:45:76:6e:ea:27:00:88:56:6b: 35:8f:ed:21:92:94:86:56:04:50:30:fb:a6:7b:c4: 7c:3b:f3:5e:c5:c7:2e:aa:17:ae:74:8c:7d:2f:e8: b5:b2:b5:b1:8c:7a:94:c9:d8:d5:8b:2a:ba:e5:33: 31:56:ea:9f:da:8e:3b:35:bc:28:91:68:a3:f6:c8: 64:aa:ed:ce:58:00:4b:a2:66:bd:c9:6c:0c:ab:41: 26:6b:79:a5:bb:81:59:eb:80:13:e6:45:7d:f0:09: 78:45:7b:db:6b:25:ae:91:1e:8c:5c:c8:fb:90:77: b9:a4:4d:e3:bb:c8:5c:4b:ee:6d:fc:50:37:c5:9e: 00:69:87:ad:1f:55:05:4f:2a:36:ac:02:15:e4:df: 2d:66:37:45:7f:68:b0:fe:6a:ef:ae:75:60:96:8a: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:69:92:E7:D6:D7:C9:01:CF:58:E8:7F:68:C4:7A:5A:20:12:90:EC X509v3 Authority Key Identifier: keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:39:92:e9:e0:64:34:a4:74:c7:92:60:25:11:e4:72:31:2b: ad:63:14:0e:09:de:0e:4b:48:67:ef:e4:1d:b6:52:62:5d:ba: 55:87:99:a8:77:40:19:3c:36:e4:37:d4:36:57:77:e7:18:c0: 98:8f:f7:19:f2:d8:b3:ba:4a:a1:db:7e:ed:2b:e9:48:ae:1d: c1:d6:c4:8c:ad:57:d4:95:ea:7c:5a:57:79:56:a5:e7:6b:7f: 80:d4:d9:40:48:55:d7:90:0c:95:80:0c:d2:07:4f:d8:3c:aa: 5f:47:a9:5b:42:3c:e8:de:70:30:89:3b:1e:f8:9c:6b:56:23: be:fd:12:ea:cf:06:33:81:ad:14:6e:77:dd:80:96:ed:5c:97: 41:5e:00:ab:c5:f8:f2:42:d1:12:ef:12:05:70:36:d3:45:4e: f8:a2:4c:f8:0d:6e:28:61:a8:be:24:22:0b:96:34:83:75:b9: fe:d9:2a:1e:47:8a:06:cd:68:1f:a5:e3:55:80:ae:fa:0a:de: 27:36:a4:2f:b7:b1:5e:18:e3:ca:52:d9:6a:19:97:b4:a2:dc: e6:0f:7a:cb:58:a1:98:26:a2:7e:f3:7c:c3:59:da:ba:29:4c: 7a:dd:e6:6f:bd:1c:cb:52:2d:93:b5:88:29:e8:09:b9:41:dc: f7:1d:2c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbK8XwAdG9mv7HrFe5n8BbWlBu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZB RUY4RURFRjAeFw0yNTEyMDQxMzA2NTRaFw0yNTEyMDgwMDEyNTRaMDMxMTAvBgNV BAMTKDdCNjk5MkU3RDZEN0M5MDFDRjU4RTg3RjY4QzQ3QTVBMjAxMjkwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/mt9pIuTLHKPoc9WmFmf5mTD McRjIK717IXex3MIhlhu9L2zN4WjonnoVZ9SfizVGZ8kjOgrfs3z479Ulki7Hv8U 85LH4JaRY3EkFh+IBGG6XsxEjnikzr8OoDH+tEV2buonAIhWazWP7SGSlIZWBFAw +6Z7xHw7817Fxy6qF650jH0v6LWytbGMepTJ2NWLKrrlMzFW6p/ajjs1vCiRaKP2 yGSq7c5YAEuiZr3JbAyrQSZreaW7gVnrgBPmRX3wCXhFe9trJa6RHoxcyPuQd7mk TeO7yFxL7m38UDfFngBph60fVQVPKjasAhXk3y1mN0V/aLD+au+udWCWig3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2mS59bXyQHPWOh/aMR6WiASkOwwHwYDVR0j BBgwFoAUbjyJ5qPjxhpzFYo8/4KQn6747e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWFhOGNiZS03MThiLTQ5NTMtYjc4OS02MGZhODU3YWVjOGQvMC82RTNDODlFNkEz RTNDNjFBNzMxNThBM0NGRjgyOTA5RkFFRjhFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZBRUY4 RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3 ODktNjBmYTg1N2FlYzhkLzAvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4Mjkw OUZBRUY4RURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABw5kungZDSkdMeSYCUR5HIxK61jFA4J3g5L SGfv5B22UmJdulWHmah3QBk8NuQ31DZXd+cYwJiP9xny2LO6SqHbfu0r6UiuHcHW xIytV9SV6nxaV3lWpedrf4DU2UBIVdeQDJWADNIHT9g8ql9HqVtCPOjecDCJOx74 nGtWI779EurPBjOBrRRud92Alu1cl0FeAKvF+PJC0RLvEgVwNtNFTviiTPgNbihh qL4kIguWNIN1uf7ZKh5HigbNaB+l41WArvoK3ic2pC+3sV4Y48pS2WoZl7Si3OYP estYoZgmon7zfMNZ2ropTHrd5m+9HMtSLZO1iCnoCblB3PcdLBg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:42 2025 by rpki-client